Now officially on WordPress.org

CVE Database / CVE-2026-24611

CVE · Critical

CVE-2026-24611 — MetForm Pro [metform-pro] < 3.9.9

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-24611 MetForm Pro [metform-pro] < 3.9.9 Missing Authorization Critical 9.1 < 3.9.9 3.9.9 2026-03-12 —

CVE-2026-24611

A flaw exists in the MetForm Pro plugin for WordPress, allowing unauthorized individuals to bypass security checks and execute certain actions without proper clearance. The issue stems from a missing capability verification on a specific function within versions 3.9.8 and earlier of the plugin. This oversight enables unverified users to carry out unauthorized operations.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings